Typosquatting Explained
How attackers exploit common typing errors in domain names.
What is Typosquatting?
Typosquatting (also called URL hijacking) is registering domains with common misspellings of legitimate sites to capture traffic from typing errors.
Common Techniques
- Character omission – gogle.com instead of google.com
- Character addition – googgle.com
- Adjacent key substitution – goofle.com (f is near g)
- Character transposition – googel.com
- Wrong TLD – google.co instead of google.com
Common Uses
- Phishing for credentials
- Malware distribution
- Advertising revenue
- Selling back to brand owner
Detection
Generate and monitor permutations of your domain. Our typosquatting detection automates this process.